Re: [tcpdump-workers] Max OS-X issues: read privledges / bpf buffer

2004-09-03 Thread Bruce M Simpson
Hi, On Fri, Sep 03, 2004 at 11:41:42AM -0700, Guy Harris wrote: > >One last thing, I noticed in some other mails this month that > >eliminating timestamping will increase performance of bpf. I don't use > >this feature of bpf, is there a way for me to turn it off in Darwin? > > I suspect they

Re: [tcpdump-workers] Max OS-X issues: read privledges / bpf buffer

2004-09-03 Thread Guy Harris
(Crap added to avoid this retransmission, with the right "From:" address this time, being seen as a duplicate. Now is the time for all good parties to come to the aid of man.) Eric St.John wrote: I'm trying to use libpcap in Darwin (uses bpf). In order to capture the packets, I must have read ac

[tcpdump-workers] Max OS-X issues: read privledges / bpf buffer size

2004-09-03 Thread Eric St.John
I'm trying to use libpcap in Darwin (uses bpf). In order to capture the packets, I must have read acess to the /dev/bpf* files. I can chmod these, but as soon as I reboot their privledges are reset! Any ideas? I would also like to get a larger bpf buffer size. I call ioctl(fd, BIOCSBLEN, (caddr